Bay Area Hospital 1775 Thompson Road Coos Bay, OR 97420
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
If you have any questions about this notice, please contact the Privacy Officer at 541-269-8150.
At Bay Area Hospital, we understand that medical information about you and your health is personal. Medical information includes personal information such as name, address, date of birth, social security number and insurance information. We create a record of the care and services you receive at the hospital or its subsidiaries. We need this record to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated at or by the hospital, whether made by hospital personnel, your personal doctor or specialists involved in your treatment or other caregivers. We are required by law to make sure that your personal health information will be kept private at all times and provide you with a description of our privacy practices with respect to your medical information. We will abide by the terms of this notice.
Bay Area Hospital (the “hospital” or “BAH”) is a clinically integrated care setting in which patients typically receive health care from more than one health care provider. This means that your care may be provided by (1) hospital staff members, (2) physicians and other practitioners in hospital-based practices, and/or (3) physicians and other practitioners who practice in independent settings but who have privileges to provide care at the hospital. Your personal doctors and other practitioners who are independent may have different policies and notices regarding the use and disclosure of your medical information created in the doctor’s office or clinic. BAH accepts no legal responsibility for activities solely attributable to these other legally separate independent providers or care settings. However, these independent practitioners have agreed to abide by the practices described in this notice through an Organized Health Care Arrangement (OHCA), with respect to care they provide to you here at the hospital and the medical information in your records here at the hospital.
Therefore, this notice describes our hospital’s privacy practices and those of: (1) any health care professional authorized to enter information into your hospital chart; (2) all departments and units of the hospital; (3) any member of a volunteer group we allow to help you while you are in the hospital; (4) all employees, hospital-based physician practices, staff and other hospital personnel; and (5) all owned subsidiary entities of the hospital including BAH Radiation Therapy Center, BAH Home Health, BAH Pharmacy Services, BAH Psychiatric Services, and South Coast Radiology.
All these entities, practitioners and caregivers follow the terms of this notice. In addition, these entities, practitioners and caregivers may share medical information with each other for treatment, payment, or health care operations purposes described in this notice.
This section describes different ways that we may use and disclose medical information about you without your permission as allowed by federal law. For each category of uses or disclosures we explain what we mean and try to give some examples. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use or disclose information will fall into one of the categories.
For Treatment. BAH may use medical information about you to provide you with medical treatment and services. We may disclose medical information about you to doctors, nurses, technicians, medical students, or other hospital personnel who are involved in taking care of you at the hospital. For example, a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. In addition, the doctor may need to tell the dietitian if you have diabetes so that we can arrange for appropriate meals. Different departments of the hospital also may share medical information about you in order to coordinate the different things you need, such as prescriptions, lab work and x-rays. We also may disclose medical information about you to people outside the hospital who may be involved in your medical care after you leave the hospital, such as home health agencies, physical therapists, or other health care practitioners who may provide services that are part of your care.
For Payment. BAH is permitted to use and disclose your medical information for payment purposes or the payment purposes of other health care providers or health plans. For example, the BAH billing department may release medical information to your health insurer to allow the insurer to pay BAH or reimburse you for your treatment. BAH also may release medical information to emergency responders to allow them to obtain payment or reimbursement for services provided to you.
For Health Care Operations. BAH is permitted to use and disclose your medical information for purposes of BAH operations. BAH is also permitted to disclose your medical information for the health care operations of another health care provider or health plan so long as they have a relationship with you or are part of our Organized Health Care Arrangement (OHCA). For example, the BAH quality services department may use your medical information to assess the quality of care and services provided to our patients so that we may improve upon those services. BAH may use your medical information to ensure BAH is complying with all federal and state compliance requirements. BAH may also disclose your medical information to a community physician to assist the physician in assessing the quality of care provided in your case and for other similar purposes.
Other Activities. We may also use and disclosure your protected health information:
Business Associates. As part of our health care operations, Bay Area Hospital routinely contracts with outside companies that perform business services for the hospital. These include billing companies, management consultants, quality assurance reviewers, accountants or attorneys. In certain circumstances, we may share your medical information with a business associate so it can perform a service on behalf of the hospital. We will limit the disclosure of your information to a business associate to the minimum amount necessary for the company to perform the service for the hospital. In addition, we are required by federal law to have a written contract in place with the business associate requiring their compliance with protecting the privacy and security of your medical information.
Research. Under certain circumstances, we may use and disclose medical information about you for research purposes. For example, a research project may involve comparing the health and recovery of all patients who receive one medication to those who receive another, for the same condition. All research projects, however, are subject to a special approval process through an Institutional Review Board (IRB). This process evaluates a proposed research project and its use of medical information, trying to balance the research needs with the patients’ need for privacy of their medical information. Before we use or disclose medical information for research, the project will have been approved through this research approval process, but we may, however, disclose medical information about you to people preparing to conduct a research project, for example, to help them look for patients with specific medical needs, so long as the medical information they review does not leave the hospital. We will almost always ask for your specific permission if the researcher will have access to your name, address or other information that reveals who you are, or will be involved in your care at the hospital.
As Required by Law. We will disclose medical or other information about you when required to do so and only to the extent required by law. This made include, but is not limited to:
Oregon Law. Oregon law provides additional confidentiality protections in some circumstances. For example, in Oregon a health care provider generally may not release the identity of a person tested for HIV or the results of the HIV-related tests without your consent and you must be notified of this confidentiality right. Mental health records are also specially protected in some circumstances, as is genetic testing information.
For more information on Oregon laws related to these and other specially protected health records, please contact the Privacy Officer at 541-269-8150. You may also refer to the Oregon Revised Statutes and the Oregon Administrative Rules available online at www.oregon.gov.
Judicial and Administrative Proceedings. If you are involved in a lawsuit or a dispute, we may disclose information about you in response to a court or administrative order. We may also disclose information about you in response to a subpoena, discovery request, or other legal process by someone else involved in the dispute, but only if efforts have been made to tell you about the request to obtain an order protecting the information requested.
Law Enforcement Officials. We may release limited personal information if asked to do so by a law enforcement official:
Organ and Tissue Donation. If you are an organ donor, we may release information about you to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank, as necessary, to facilitate organ or tissue donation and transplantation.
Military Command Authorities. If you are a member of the armed forces, we may release information about you are required by military command authorities. We may also release information about foreign military personnel to the appropriate foreign military authority.
Worker’s Compensation. We may release medical information about you for worker’s compensation or similar programs to the extent authorized by law which provide benefits for work-related injuries or illness.
Food and Drug Administration (FDA). We may release medical information about you to report reactions to medications or problems with products.
National Security and Intelligence Activities. We may disclose information about you to authorized federal officials for intelligence, counterintelligence, and other national security activities as authorized by law.
To Avert a Serious Threat to Health or Safety. We may use and disclose medical information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or other persons.
Protection Services for the President and Others. We may disclose information about you to authorized federal officials so they may provide protection to the President, other authorized persons or foreign heads of state or to conduct special investigations.
Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release medical information about you to the correctional institution or law enforcement official. This release would be necessary (1) for the institution to provide you with health care; (2) to protect your health and safety of the health and safety of others; or (3) for the safety and security of the correctional institution.
Incidental Disclosures. Certain incidental disclosures of your medical information may occur as a byproduct of lawful or permitted use and disclosure of your medical information. For example, a visitor may inadvertently overhear a discussion about your care occurring at a nurse’s station. These incidental disclosures are permitted if the hospital applies reasonable safeguards to minimize the disclosure and protect your medical information.
Limited Data Set Information. We may disclose limited health information to third parties for purposes of research, public health and health care operation purposes. This health information includes only the following identifiers:
Before disclosing limited data sets, we must enter into an agreement with the recipient of the information that limits who may use or receive the data and requires the recipient to agree not to re-identify the data or attempt to contact you. The agreement must contain assurances that the recipient will use appropriate safeguards to prevent inappropriate use or disclosure of the information.
Hospital Directory. We may include certain limited information about you in the hospital directory while you are a patient at the hospital. This information may include your name, location in the hospital, your general condition (e.g., fair, stable, etc.) and your religious affiliation. The directory information, except for your religious affiliation, may also be released to people who ask for you by name. Your religious affiliation may be given to any member of the clergy, such as a priest or rabbi, even if they don’t ask for you by name. This is so your family, friends, and clergy can visit you in the hospital and generally know how you are doing. You have the right to object, in writing, upon admission to the hospital, and any time during hospitalization, to the use or disclosure of your medical information from the hospital directory to family members, friends, visitors, clergy, and others who may ask for you by name (such as a florist), and if you do so, we will follow your wishes. As allowed by law, we may use your personal information from the hospital directory in the event you are incapacitated or undergoing emergency medical treatment, but only consistent with your prior expressed wishes.
Family or Friends Involved in Your Care. We may release information about you to a friend or family members who is involved in your medical care. We may also give your information to someone who helps pay for your care. We may also tell your family or friends your condition and that you are in the hospital. In addition, we may disclose medical information about you to an authorized entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location. You have the right to object, in writing, to the use and disclosure of your personal health information to family or friends who re involved in your care or who help pay for your care and, if you do so, we will follow your wishes.
Marketing. Occasionally, the hospital may request to use your name or photograph for reasons of promoting a particular product or service that encourages others to purchase or use a particular product or service. An example would be to use your photograph in a promotional advertisement for a particular service we offer to the community. We will obtain your permission for this and prior to use or disclosure of any of your information for marketing unless the marketing communication occurs in a face-to-face meeting we have with you or concerns promotional gifts of nominal value we give you. If the hospital is to receive money from another party in connection with a marketing communication with you, we will state the fact on the authorization we request from you.
Health Information Exchange Organization (HIE). Bay Area Hospital participates in a community-wide health information exchange organization known as the Bay Area Community Informatics Agency (“BACIA”) in which your personal health information is shared electronically among other hospitals, labs, x-ray facilities, and doctors in Oregon’s South Coast that participate with BACIA. BACIA is a secure way for your doctor to get the most up-to-date medical information about you. For example, your record may include the following kinds of protected health information: demographic (name, age, address); medical (diagnosis, treatment history, referrals to other providers); and encounter data (description of services provided). Only health care providers with a valid reason will be allowed to see your test results and reports. Also, information that could help save your life in an emergency will be available to emergency room (ER) physicians. You have the right to opt out or withdraw participation in BACIA at any time, but if you withdraw participation in BACIA, we may not be able to share all of your relevant health information with other health care providers involved in your treatment and care. We will not deny you treatment or care if you choose not to participate in BACIA. You may request withdrawal from BACIA by completing a Non-Participation Form available through your provider.
Other uses and disclosures for purposes other than those described in this notice require your express authorization. For example, BAH must obtain your authorization before disclosing your medical information to a life insurance company or to an employer, except under special circumstances such as when disclosure to the employer is required by law. You have the right to revoke an authorization at any time, except to the extent BAH has already relied on it in making an authorized use or disclosure. Your revocation of an authorization must be in writing.
Bay Area Hospital hopes that if you choose to revoke an authorization, you will help us comply with your wishes by identifying the authorization you are choosing to revoke. Ways of telling us which authorization you are revoking might include indicating who you authorized to receive information or the approximate time frame in which you signed the authorization.
You have the following rights regarding medical information we maintain about you:
Bay Area Hospital reserves the right to change our health information practices and the terms of this notice at any time. We reserve the right to make the revised or changed notice effective for medical information we already have about you as well any information we receive or create about you in the future. Should our health information practices change, we will post copy of the revised notice at our service delivery sites and make the revised notice available to you upon request.
If you believe your privacy rights have been violated, you may file a complaint with the hospital by contacting the Privacy Officer at Bay Area Hospital, 1775 Thompson Rd., Coos Bay, OR 97420 or by phone at 541-269-8150, or with the Secretary of the Department of Health and Human Services, 200 Independence Avenue SW, Washington, D.C. There will be no retaliation for filing a complaint.